Design/Logic Flaw

2023-09-0610:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

network-adjacent

unauthenticated attacker

arbitrary os commands

nvd

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.5%

JSON

Archer C1200 firmware versions prior to ‘Archer C1200(JP)_V2_230508’ and Archer C9 firmware versions prior to ‘Archer C9(JP)_V3_230508’ allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.

CPENameOperatorVersion
archer_c1200_firmwarelt230508
archer_c9_firmwarelt230508

CPE	Name	Operator	Version
	archer_c1200_firmware	lt	230508
	archer_c9_firmware	lt	230508

References

jvn.jp/en/vu/JVNVU99392903/

www.tp-link.com/jp/support/download/archer-c1200/

www.tp-link.com/jp/support/download/archer-c9/v3/